AbuseIPDB » 45.138.16.107

45.138.16.107 was found in our database!

This IP was reported 1,065 times. Confidence of Abuse is 100%: ?

100%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	1337 Services GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS210558
Domain Name	as210558.net
Country	Poland
City	Warsaw, Mazovia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 45.138.16.107

Whois 45.138.16.107

IP Abuse Reports for 45.138.16.107:

This IP address has been reported a total of 1,065 times from 244 distinct sources. 45.138.16.107 was first reported on June 2nd 2023, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Player Unknown	2025-06-10 15:47:07 (1 week ago)	45.138.16.107 - - [10/Jun/2025:08:47:05 -0700] "\x16\x03\x01\x00\xE9\x01\x00\x00\xE5\x03\x03\xAC5\xF ... show more45.138.16.107 - - [10/Jun/2025:08:47:05 -0700] "\x16\x03\x01\x00\xE9\x01\x00\x00\xE5\x03\x03\xAC5\xFB\xBEAO\x0E\xC0v\xA4\xDE\xD9~\x0F)\xDF\x8A.%%\xA0\x8F\x8F\xFA\x8C\xCA\xB3)\xE0\x81\xBF: \xA7\xFB\xEF\xAE\xF6\x86|j\x87\x0EJ1{\xFA_\xB1\xFE\x05\xE1\xD1\x88*\x11\xFD\x8CT\x08\xBB\x9CZ\xEF@\x00(\x13\x01\x13\x02\x13\x03\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0'\xC0" 400 157 "-" "-" 45.138.16.107 - - [10/Jun/2025:08:47:05 -0700] "\x16\x03\x01\x00\xE9\x01\x00\x00\xE5\x03\x03uU2-\x1E\xB7\x10\x19\x04\xE9`\xC5*\xA5\xF3\xE3E\xA4;C\xD83\xC5\xF1\xFB\xB4\xF0\x88\x94\x01\x9BZ M@\xF5\xD2\x83_h\x14\xBFf3\x9C\xF1\x91\xC8\xD9\x05\xDE\xAAK_\xEE<\xB1\xEC\xFA@\xE6\xD1\x977\x18\x00(\x13\x01\x13\x02\x13\x03\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0'\xC0" 400 157 "-" "-" 45.138.16.107 - - [10/Jun/2025:08:47:06 -0700] "\x16\x03\x01\x00\xE9\x01\x00\x00\xE5\x03\x032\x18\x02\x92m\xFF\x05\x9B\xD6\xC8\x9E\xE4\x01\x92Lb\x1D\xC6\xD3\xCA\xD2\xDA@\x937Eie\xB0\xC8\x1Ex &\xADY\xA3\x82\xC4\xC4\x ... show less	Brute-Force SSH
LRob.fr	2025-06-10 13:45:05 (1 week ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
INTEQ	2025-06-10 12:35:58 (1 week ago)	Web attack from 45.138.16.107	Web App Attack
TPI-Abuse	2025-06-10 01:09:11 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 45.138.16.107 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 45.138.16.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 09 21:09:05.651500 2025] [security2:error] [pid 678670:tid 678670] [client 45.138.16.107:62016] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "digi-estudio.com"] [uri "/wp-config.php.save.3"] [unique_id "aEeFseILEz_zV-22YJW3iwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-06-09 20:50:36 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 45.138.16.107 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210730) triggered by 45.138.16.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 09 16:50:31.121815 2025] [security2:error] [pid 3683888:tid 3683888] [client 45.138.16.107:19722] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||fattoria-rendena.it|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "fattoria-rendena.it"] [uri "/rendena.sql"] [unique_id "aEdJFyzEznqN5G2xKD7kTwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-06-09 03:07:04 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 45.138.16.107 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 45.138.16.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 08 23:06:58.788221 2025] [security2:error] [pid 51197:tid 51197] [client 45.138.16.107:14486] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "philadelphiacalligraphers.org.book-arts.com"] [uri "/.git/config"] [unique_id "aEZP0n5-5B5NBTcoTixezQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
digitallodge.cloud	2025-06-08 23:40:23 (1 week ago)	Blocked on port 58094 (TTL:166, LEN:103, TOS:0x00). Reason: UFW BLOCK IN=eth0 OUT= MAC=00:11:22:33:4 ... show moreBlocked on port 58094 (TTL:166, LEN:103, TOS:0x00). Reason: UFW BLOCK IN=eth0 OUT= MAC=00:11:22:33:44:55 SRC=45.138.16.107 DST=45.134.39.16 LEN=103 TOS=0x00 PREC=0x00 TTL=166 ID=12345 PROTO=TCP SPT=12345 DPT=58094 WINDOW=65535 RES=0x00 SYN URGP=0. Reported by DigitalLodge Security. show less	Hacking Brute-Force
vexhost.pl	2025-06-08 17:35:30 (1 week ago)	Suspicous activity [srv-R9-1] | 2025-06-08 17:35:30 UTC	Brute-Force
vexhost.pl	2025-06-08 12:38:33 (1 week ago)	Suspicous activity [srv-R9-1] | 2025-06-08 12:38:32 UTC	Brute-Force
vexhost.pl	2025-06-07 22:49:55 (1 week ago)	Suspicous activity [srv-R9-1] | 2025-06-07 22:49:55 UTC	Brute-Force
Pingger Shikkoken	2025-06-07 20:52:25 (1 week ago)	2025-06-07T20:52:25+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ... show more2025-06-07T20:52:25+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=45.138.16.107 DST=10.1.1.11 LEN=60 TOS=0x00 PREC=0x40 TTL=56 ID=44002 DF PROTO=TCP SPT=20598 DPT=8443 WINDOW=64240 RES=0x00 SYN URGP=0 2025-06-07T20:52:26+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=45.138.16.107 DST=10.1.1.11 LEN=60 TOS=0x00 PREC=0x40 TTL=56 ID=44003 DF PROTO=TCP SPT=20598 DPT=8443 WINDOW=64240 RES=0x00 SYN URGP=0 2025-06-07T20:52:28+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=45.138.16.107 DST=10.1.1.11 LEN=60 TOS=0x00 PREC=0x40 TTL=56 ID=44004 DF PROTO=TCP SPT=20598 DPT=8443 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Hacking Bad Web Bot
vexhost.pl	2025-06-07 20:37:55 (1 week ago)	Suspicous activity [srv-R9-1] | 2025-06-07 20:37:55 UTC	Brute-Force
Pingger Shikkoken	2025-06-06 17:01:48 (2 weeks ago)	2025-06-06T17:01:48+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ... show more2025-06-06T17:01:48+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=45.138.16.107 DST=10.1.1.11 LEN=60 TOS=0x00 PREC=0x40 TTL=56 ID=8623 DF PROTO=TCP SPT=22358 DPT=8443 WINDOW=64240 RES=0x00 SYN URGP=0 2025-06-06T17:01:48+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=45.138.16.107 DST=10.1.1.11 LEN=60 TOS=0x00 PREC=0x40 TTL=56 ID=8624 DF PROTO=TCP SPT=22358 DPT=8443 WINDOW=64240 RES=0x00 SYN URGP=0 2025-06-06T17:01:48+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=45.138.16.107 DST=10.1.1.11 LEN=60 TOS=0x00 PREC=0x40 TTL=56 ID=8625 DF PROTO=TCP SPT=22358 DPT=8443 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Hacking Bad Web Bot
Site.eu	2025-06-05 15:15:48 (2 weeks ago)	Excessive multi-domain requests	Brute-Force
TPI-Abuse	2025-06-04 15:43:38 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 45.138.16.107 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 45.138.16.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 04 11:43:33.176647 2025] [security2:error] [pid 2402947:tid 2402947] [client 45.138.16.107:33080] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "computergeek.us"] [uri "/.git/config"] [unique_id "aEBppUvKHhXR2C8v4B6cIwAAABY"] show less	Brute-Force Bad Web Bot Web App Attack

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩